EUVD-2026-40026

A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of the argument siteurl can lead to sql injection. The attack can be executed remotely. A high complexity level is associated with this attack...

CVE-2022-23888

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

CVE-2019-16532

An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections...

EUVD-2018-11524

Malware in sbrugna...

EUVD-2020-15156

Malware in sbrugna...

EUVD-2018-2299

Malware in sbrugna...

EUVD-2018-12593

Malware in sbrugna...

EUVD-2019-7206

Malware in sbrugna...

EUVD-2020-11025

Malware in sbrugna...

EUVD-2018-19370

Malware in sbrugna...

EUVD-2019-18941

Malware in sbrugna...

EUVD-2024-21715

Malicious code in bioql PyPI...

EUVD-2022-28813

Malicious code in bioql PyPI...

CVE-2024-24291

An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...

CVE-2020-20341

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

CVE-2020-19949

A cross-site scripting XSS vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...

CVE-2019-9570

An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...

CVE-2025-3397

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may...

CVE-2025-3397 YzmCMS message.tpl cross site scripting

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may...